conti
First seen July 31, 2020Active351 claimed victims
The claims below are reproduced as posted by conti on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Conti is an extremely damaging ransomware due to the speed with which it encrypts data and spreads to other systems. It was first observed in 2020 and it is thought to be led by a Russia-based cybercrime group that goes under the Wizard Spider pseudonym. In early May 2022, the US government announced a reward of up to $10 million for information on the Conti ransomware gang.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| EUROPA GROUP | March 7, 2022 | ransomware_live | — |
| Fujioka Eletro Imagem SA | March 7, 2022 | ransomware_live | — |
| Fuchs North America | March 7, 2022 | ransomware_live | — |
| Cummins-Wagner | March 6, 2022 | ransomware_live | — |
| Get Fresh Company | March 4, 2022 | ransomware_live | — |
| United McGill Corporation | March 4, 2022 | ransomware_live | — |
| Caledonian | March 4, 2022 | ransomware_live | — |
| Gleason Corporation | March 4, 2022 | ransomware_live | — |
| Prima Power | March 4, 2022 | ransomware_live | — |
| A.J. Rose | March 4, 2022 | ransomware_live | — |
| Lifetech Resources | March 4, 2022 | ransomware_live | — |
| Buhck Gruppe | March 3, 2022 | ransomware_live | — |
| GRUPPO ANGELANTONI | March 3, 2022 | ransomware_live | — |
| Sport Vision | March 3, 2022 | ransomware_live | — |
| HOL-MAC Corp. | March 2, 2022 | ransomware_live | — |
| Research Partnership | February 26, 2022 | ransomware_live | — |
| IDEAL Fensterbau | February 26, 2022 | ransomware_live | — |
| HF Group | February 26, 2022 | ransomware_live | — |
| University of Neuchâtel | February 26, 2022 | ransomware_live | — |
| Midas Pharma GmbH | February 25, 2022 | ransomware_live | — |
| Primex Manufacturing Inc | February 25, 2022 | ransomware_live | — |
| KRACHT GmbH | February 25, 2022 | ransomware_live | — |
| JOB AG | February 25, 2022 | ransomware_live | — |
| Colli del Soligo | February 25, 2022 | ransomware_live | — |
| The Spine Diagnostic | February 25, 2022 | ransomware_live | — |
| WARNING | February 25, 2022 | ransomware_live | — |
| Schultze and Braun | February 24, 2022 | ransomware_live | — |
| Apollo | February 24, 2022 | ransomware_live | — |
| RAMSAUER | February 23, 2022 | ransomware_live | — |
| Tudi Mechanical Systems (TMS) | February 23, 2022 | ransomware_live | — |
| Mack Defense, LLC | February 19, 2022 | ransomware_live | — |
| CSI Laboratories | February 18, 2022 | ransomware_live | — |
| Ciam SPA | February 15, 2022 | ransomware_live | — |
| GEE GROUP INC. | February 15, 2022 | ransomware_live | — |
| Muehlhan | February 14, 2022 | ransomware_live | — |
| iTCo Solutions Ltd | February 13, 2022 | ransomware_live | — |
| Ebix Inc. | February 12, 2022 | ransomware_live | — |
| Vrancor Group | February 11, 2022 | ransomware_live | — |
| New World Development Company Limited (NWD) | February 11, 2022 | ransomware_live | — |
| HelmsBriscoe | February 11, 2022 | ransomware_live | — |
| Aareon Nederland B.V. | February 11, 2022 | ransomware_live | — |
| Rheinland-Pfalz Bank | February 10, 2022 | ransomware_live | — |
| The Lovett Group | February 9, 2022 | ransomware_live | — |
| SEA-invest | February 8, 2022 | ransomware_live | — |
| MSH Steuerberatungsgesellschaft | February 7, 2022 | ransomware_live | — |
| KP SNACKS | February 7, 2022 | ransomware_live | — |
| Athens Distributing Company | February 7, 2022 | ransomware_live | — |
| NZ UNIFORMS | February 7, 2022 | ransomware_live | — |
| Zamil Industrial | February 7, 2022 | ransomware_live | — |
| Bank of Indonesia | January 20, 2022 | ransomware_live | — |
| Acuity Brands | January 15, 2022 | ransomware_live | — |
| Perennials Fabrics | January 15, 2022 | ransomware_live | — |
| Lyon-Waugh Auto Group | January 15, 2022 | ransomware_live | — |
| Safeguard | January 15, 2022 | ransomware_live | — |
| RRD | January 15, 2022 | ransomware_live | — |
| Shutterfly inc. | January 15, 2022 | ransomware_live | — |
| PLACON | January 15, 2022 | ransomware_live | — |
| Arcese | January 11, 2022 | ransomware_live | — |
| DURA | Innovation Driven by Inspiration | January 6, 2022 | ransomware_live | — |
| Iwis Group | January 3, 2022 | ransomware_live | — |
| American Dream | December 30, 2021 | ransomware_live | — |
| Mount Franklin Foods, LLC | December 28, 2021 | ransomware_live | — |
| Bernd Siegmund GmbH | December 27, 2021 | ransomware_live | — |
| RKPT | December 26, 2021 | ransomware_live | — |
| Metamorph Group | December 26, 2021 | ransomware_live | — |
| Arbor Contract Carpet Inc. | December 26, 2021 | ransomware_live | — |
| Charles Kendall | December 26, 2021 | ransomware_live | — |
| iGuzzini Group | December 26, 2021 | ransomware_live | — |
| The Technord industrial group | December 26, 2021 | ransomware_live | — |
| Economos properties | December 26, 2021 | ransomware_live | — |
| SVP Groupe | December 26, 2021 | ransomware_live | — |
| ENVASES GROUP | December 26, 2021 | ransomware_live | — |
| Polysciences, Inc. | December 25, 2021 | ransomware_live | — |
| Bay and Bay Transportation | December 23, 2021 | ransomware_live | — |
| Holiday Builders | December 22, 2021 | ransomware_live | — |
| McMenamins | December 21, 2021 | ransomware_live | — |
| The Briad Group | December 20, 2021 | ransomware_live | — |
| CASINO WINNAVEGAS | December 20, 2021 | ransomware_live | — |
| DEWEtech | December 15, 2021 | ransomware_live | — |
| Amoria Bond | December 14, 2021 | ransomware_live | — |
| WEBER_OTT AG | December 14, 2021 | ransomware_live | — |
| Comerio Ercole spa | December 13, 2021 | ransomware_live | — |
| DOMICIM Agence | December 13, 2021 | ransomware_live | — |
| MEETH | December 13, 2021 | ransomware_live | — |
| Nordic Choice Hotels | December 13, 2021 | ransomware_live | — |
| Chantelle Group | December 13, 2021 | ransomware_live | — |
| TALIS GROUP | December 13, 2021 | ransomware_live | — |
| LAVI | December 9, 2021 | ransomware_live | — |
| COMUNE DI TORINO | December 9, 2021 | ransomware_live | — |
| MST LAWYERS | December 6, 2021 | ransomware_live | — |
| Clementoni | December 6, 2021 | ransomware_live | — |
| Spencer Gifts LLC | December 5, 2021 | ransomware_live | — |
| HOULE | December 5, 2021 | ransomware_live | — |
| NLB Corporation | December 4, 2021 | ransomware_live | — |
| FRONTIER SOFTWARE | December 1, 2021 | ransomware_live | — |
| KISTERS | December 1, 2021 | ransomware_live | — |
| Burda Sanitärtechnik | November 30, 2021 | ransomware_live | — |
| San Carlo | November 29, 2021 | ransomware_live | — |
| Epple Druckfarben | November 29, 2021 | ransomware_live | — |
| SIRCHIE | November 29, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).